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<SigningRequest Return="Signature"> 
<Policy> 

<SignatureInf o Type="det ached" /> 
<KeyInfo> 

<KeyName 

Type="einail_name ">rsalz@zolera . com</KeyName> 
</KeyInfo> 

<CertChain Length="All" Type-"Certif icate"/> 
</Policy> 

<Document URI="url of document" /> 
</SigningRequest> 
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<SigningRequest> 
<Policy> 

<SignatureInf o Type="enveloped"/> 
<KeyInfo> 

<X509Data> 

<X50 9IssuerSerial> 

<X509IssuerName>CN=Rich Salz, 0=Zolera, C-US 
</X509IssuerName> 

<X5 0 9SerialNumber>1234 5 67 8</X50 9SerialNuinber> 
</X509lssuerSerial> 
</X509Data> 
</KeyInfo> 

<CertChain Length="All" Type-"Certif icate"/> 
</Policy> 
<Document URI="url of document" 
Algorithm="http: //www. w3. org/2 000/0 9/xmldsig#base 64 "> 
base64 encoded document 
</Document> 
</SigningRequest> 
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<purchaseOrder orderDate="l 999-10-20 "> 
<iteiTis> 

<item partNum-"872-AA"> 

<productNaine>Lawnmower</productName> 
<quantity>l</quantity> 
<USPrice>148 . 95</USPrice> 
</itein> 
</ items> 
</purchaseOrder> 
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<SigningRequest Return= "Signature "> 
<Policy> 

<SignatureInfo Type="enveloped"/> 
<KeyInfo> 

<KeyName 

Type="email_name ">rsalz@zolera . com</KeyName> 
</KeyInfo> 

<CertChain Length="None"/> 
</Policy> 

<Document URI-"po_txn_123"> 

<purchaseOrder orderDate="1999-10-20"> 
<items> 

<item partNuin="872-AA"> 

<productName>Lawnmower</productName> 
<quantity>l</quantity> 
<USPrice>148 . 95</USPrice> 
</item> 
</items> 
</purchaseOrder> 
</Docuinent> 
</SigningRequest> 
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<purchaseOrder orderDate="1999-10-20"> 
<items> 

<item partNuin="872-AA"> 

<productName>Lawnmower</productName> 
<quantity>l</quantity> 
<USPrice>148 . 95</USPrice> 
</item> 
</items> 

<Signature Id="178ae4" xmlns="http : //www. w3 . org/2000/09/xmldsig#"> 
<SignedInf o> 

<SignatureMethodAlgorithin="http: //www.w3.org/2000/09/xnildsig#rsa-shal"/> 
<Reference URI=""> 

<DigestMethodAlgorithm="http: //www. w3 .org/2 000/0 9/xmldsig#shal"/> 
<DigestValue>j61wx3rvEPO0vKtMup4NbeVu8nk-</DigestValue> 
</Ref erence> 

<Ref erence 

URI="#ServerSignatureProperties"Type="http: //www. w3.org/2000/09/xin 
idsig#SignatureProperty"> 

<DigestMethodAlgorithin="http : //www. w3 . org/2000/0 9/xmldsig#shal" /> 

<DigestValue>k34 53rvEPO0vKtMup4NbeVu8nk=</DigestVaiue> 
</Ref erence> 

<Reference URI="#KeyInf o"> 
<DigestMethodAlgorithni="http: //www.w3.org/2000/09/xmldsig#shal"/> 

<DigestValue>7abc3rvEPO0vKtMupdefVxdu8nk=</DigestValue> 
</Ref erence> 

</SignedInfo> 
<SignatureValue>MCOCFFrVLtRlk=. . . </SignatureValue> 
<KeyInfo Id="KeyInf o"> 

<KeyNaineType="einail_name ">rsalz@zolera . coin</KeyName> 
</KeyInfo> 
<Object> 

<SignatureProperties> 

<SignaturePropertyId="ServerSignaturePrQperties"> 
<ServerInf oxmlns="urn : caveosystems : signl "> 
<ServerIdentifier>hancock serveridentif ier</ServerIdentif ier> 
<SignatureRef erence>AB14E72 
</SignatureRef erence> 

<AuthenticityStanip>blob</AuthenticityStamp> 

<VerificationURI>http: //www. zolera.com/2000/VerifierService/ 
</VerificationURI> 

</ServerInf o> 

<timestamp xmlns="http : //www. iet f . org/rf cXXXX. txt ">YYYYMMDDHHMMSS . f f f Z 
</tiinestanip> 

</SignatureProperty> 
</SignatureProperties> 
</Object> 
</Signature> 
</purchaseOrder> 
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<SigningResponse> 

<Status Type="Success"/> 
<SignatureResult Return^" Signature "> 

<Signature Id="178ae4" xmlns-"http : //www. w3 . org/2000/09/xmldsig#"> 
<SignedInf o> 

<SignatureMethod 
Algorithin="http: //www. w3, org/200 0/0 9/xmldsig#rsa-shal"/> 

<Reference URI-=""> 
<DigestMethod 

Algorithm="http: //www.w3.org/2000/09/xmldsig#shal"/> 

<DigestValue>j 61wx3rvEPO0vKtMup4NbeVu8nk=</DigestValue> 
</Ref erence> 
<Ref erence 

URI="#ServerSignatureProperties"Type-"http: //www. w3.org/20 00 

/09/xinldsig#SignatureProperty"> 
<DigestMethod Algorithin="http : //www. w3 . org/200 0/0 9/xmldsig#shal"/> 
<DigestValue>k34 53rvEPO0vKtMup4NbeVu8nk=</DigestValue> 
</Ref erence> 
<Reference URI="#KeyInf o"> 

<&gestMethodAlgorithm-"http: //www. w3 .org/2 00 0/0 9/xmldsig#shal"/> 
\£l <DigestValue>7abc3rvEPO0vKtMupdefVxdu8nk= 
Ui </DigestValue> 
£ </Ref erence> 

fH </SignedInf o> 

1= <SignatureValue>MCOCFFrVLtRlk=, . . </SignatureValue> 

<KeyInfo Id="KeyInf o"> 
<KeyName Type="email_naine">rsalz@zolera . com</KeyNaine> 
</KeyInfo> 
<Object> 

O <SignatureProperties> 

£ <SignatureProperty Id="ServerSignatureProperties" 

fll <ServerInfo 

1 ,1 xmlns="urn: caveosystems : signl"> <ServerIdentif ier>hancock 

server identif ier</ServerIdentif ier> 
J''' <SignatureReference>AB14E72 
</SignatureRef erence> 

<AuthenticityStamp>blob</AuthenticityStainp> 

<Verif icationURI>http: //www. zolera . com/2 000 /Ver if ierService/</VerificationURI> 
< /Server Info> 
<timestainp xmlns="http: //www. ietf . org/rf cXXXX. txt "> 
YYYYMMDDHHMMSS . f f f Z</timestamp> 
</ SignatureProperty> 

</ Signature Properties > 
</Object> 
</Signature> 
</SignatureResult> 
</SigningResponse> 
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<Verif icationRequest Type=" receipt "> 
<Verif yinf o> 

<Signature> 

The XML signature to be verified, including 
Signedlnfo and Objects. Hancock Signature Object and 
Keylnfo required. 

</Signature> 

<Document URI="url of document" 
Algorithm="http: / /www. w3. org/200 0/09/xmldsig#base64"> 
base64 encoded document 
</ Document > 
</Verif icationRequest > 
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<Verif icationRequest> 
<Verif yInf o> 

<Signature Id="7"/> 
<Document 

URI^"http: / /www. zolera. com/example . xml"/> 

</VerifyInfo> 
</Verif icationRequest > 
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<Verif icationResponse> 
<VerifyInfo> 

<SignatureReference Type="Id">7</SignatureRef erence> 
<SignatureStatus Type=" Invalid" /> 
<CredentialStatus Type="Revoked" 
Type-"Certificate">MIICPzCCA. . . </CredentialStatus> 
</VerifyInfo> 
<ServerIdentif ier>75axxx</ServerIdentif ier> 
<Timestamp>< /Times tamp> 
</Verif icationResponse> 
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<Verif icationResponse TYPE=" receipt "> 

elements as defined above, and additional Signature 
elements : 

<Signature> 

<Signedlnfo </SignedInf o> 
<Object> 

<SignatureProperties> 
<SignatureProperty 
Id="ServerSignatureProperties"> as defined above 
</SignatureProperty> 
</SignatureProperties> 
</Object> 

</Signature> </Verif icationResponse> 
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<SignatureSummaryRequest> 

<SignedDocument URI="url of document" 
Algorithm-"http: //www.w3.org/2000/09/xmldsig#base64"> 
base 64 encoded document 

</SignedDocument> 
</SignatureSummaryRequest> 
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<SignatureSummaryRequest> 

<SignedDocument Identifier 
>7E5</SignedDocumentIdentif ier> 

<SignatureIdentification Id="78"/> 
</ SignatureSummaryRequest>SignedDocument Identifier 
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<SignatureSuinmary > 

<SignatureInfo Id="f irstsig" TYPE="detached"> 
<KeySumiriary Length="56" Rating="B"/> 
<SignatureSuminary 
Algorithm="http: //www, w3.org/2000 /09/xinldsig#shal" 
Rating-"C+"/> 

<CredentialSummary Type-"none" Rating="F"/> 
<SignatureInf o> 
<SignatureInfo Id="secondsig" TYPE="enveloped"> 
<KeySuinmary Length="128" Rating="A"/> 
<SigSuminary 

Algorithin="http: //www. w3.org/2000/ 0 9/xmldsig#shal" 
Rating="A"/> 

<CredentialSuitiinary Type="x509" Rating-"c"> 
<X509Data> <1 — certificate chain --> 
<1 — Signer cert, issuer 
C=US,0=IBM,OU-FVT,CN=arbolCA serial 4— > 

<X509Certificate>MIICXTCCA. . </X509Certif icate> 
<! — Intermediate cert subject 
C=US, 0=IBM, OU-FVT, CN=arbolCAissuer, C=US, 0=Bridgepoint , OU-FVT, CN=tootiseCA 
<X509Certificate>MIICPzCCA. . . </X509Certif icate> 
<l — Root cert subject 
C=US, 0-Bridgepoint , OU=FVT, CN=tootiseCA — > 

<X509Certificate>MIICSTCCA. . . </X509Certif icate> 
<!-- Root cert subject 
C=US, 0=Bridgepoint , OU=FVT, CN=tootiseCA — > 

<X509Certificate>MIICSTCCA. . . </X509Certif icate> 
</X509Data> 
</CredentialSumnary> 
<SignatureInf o> 
<Disclaiiner>t€xt</Disclaimer> 
< / S i gn a t u r e S Ultima r y > 
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<Signature> 

<SignedInfo> 

( Canonical izationMethod) 
(SignatureMethod) 
(<Reference (URI=) ? > 
(Transforms) ? 
(DigestMethod) 
(DigestValue) 
</Ref erence>) + 
</SignedInf o> 
( SignatureValue ) 
(Keylnfo) ? 
(Object) * 
</Signature> 
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<Reference URI="http: //www, w3 . org/TR/2 OOO/REC-xhtmll-2000 0126/ "> 
<Transf orms> 

<Transforiti Algorithin-"http: //www. w3 . org/TR/2000/WD-xinl-cl4n-20000710"/> 
</Transforins> 

<DigestMethod Algorithm-"http : //www. w3 . org/2 000/0 9/xmldsig#shal"/> 
<DigestValue>j61wx3rvEPO0vKtMup4NbeVu8nk=</DigestValue> 
</Ref erence> 
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<KeyInfo> 

<X509Data> <! — certificate chain — > 

<! --Signer cert, issuer C=US, 0=IBM, OU=FVT, CN=arbolCA serial 4--> 
<X509Certificate>MIICXTCCA. . </X509Certif icate> 
<! — Intermediate cert subject C=US, 0=IBM, OU=FVT, CN=arbolCA 
issuer, C=US, 0=Bridgepoint , OU=FVT, CN=tootiseCA — > 

<X509Certificate>MIICPzCCA. . . </X50 9Certif icate> 

<! — Root cert subject C=US, 0=Bridgepoint , OU=FVT, CN=tootiseCA — > 
<X509Certificate>MIICSTCCA. . . </X50 9Certif icate> 
</X509Data> 
</KeyInfo> 
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<Object> 

<SignatureProperties> 

<SignatureProperty Id="ServerSignatureProperties"> 

<HancockSignatureProperties></HancockSignatureProperties> 
</SignatureProperty> 
</SignatureProperties> 
</Object> 
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<Ref erence URI="#ServerSignatureProperties" 

Type-="http: //www. w3 . org/2000/09/xmldsig#SignatureProperty"> 
<DigestMethod 

Algorithin-"http: //www. w3 . org/2000 /09/xirildsig#shal"/> 

<DigestValue>k3453rvEPOQvKtMup4NbeVu8nk=</DigestValue> 
</Reference> 
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POST /SigningRequest HTTP/1.1 
Host: www.signingserver.com 
Content-Type: text/xml; charset^"utf-8 " 
Content-Length : nnnn 
SOAPAction: "Some-URI" 

<SOAP-ENV : Envelope 

xrtilns : SOAP-ENV="http : //schemas . xmlsoap.org/soap/envelope/" 

SOAP-ENV: encodingStyle="http: //schemas . xmlsoap . org/soap/en 
coding/ "> 

<SOAP-ENV:Body> 

<SigningRequest Return^ "Signature" 
xmlns : "urn: caveosystems : signl"> 
<Policy> 

<SignatureInf o Type= "detached" /> 
<KeyInfo> 

<KeyName 

Type="email_name ">rsalz@zolera . com</KeyName> 
</KeyInfo> 

<CertChain Length="All" Type="Certif icate"/> 
</Policy> 

<Document URI="url of document" /> 
</SigningRequest> 
</SOAP-ENV:Body> 
</SOAP-ENV: Envelope> 



